| |||||||||||||||||||||||||||||||
|
> At 02:14 PM 5/8/2008, Wietse Venema wrote: > > > I am noticing an odd and somewhat disturbing thing on my FreeBSD > > > postfix installations. When I redo my transport table, > > > > > > postmap /etc/postfix/transport > > > > > > and then do a "strings /etc/postfix/transport.db" I see not only > > > the contents of the "transport" file, but also my entire master > > > password file including the password hashes! That seems like a > > > very bad thing. This occurs on all 8 of my FreeBSD postfix > > > installations. > > > >You may want to update the bug report. > > > >In /usr/src/lib/libc/db/README, it says compile with -DPURIFY > >otherwise it will write uninitialized memory to the file. > > > >I just checked, and this fixes the problem. You have to add a line > >with: #include <string.h> to /usr/src/lib/libc/db/db/hash/hash_buf.c > > I have updated the FreeBSD bug report, although I note that the file > above does not exist on my machines. I have a /usr/src/lib/libc/db/db > directory but nothing beyond that even though I have compiled custom > kernels on all the servers. Looks to me like "hash" was never compiled. You can install kernel sources without installing userland sources. I usually install kernel and userland source, so I can build a smaller kernel and apply bugfixes to kernel or userland. Wietse
| ||||||||||||||||||||||||||||||
© 2004-2008 readlist.com